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4801 Tesla Dr. 
Suite C 
Bowie, MD 20715 

(301) 352-4901 
Fax (443) 782-0652 
Ron.Martin@rcm-corp. com 


June 21, 2019 

Sonya Pearrell, Contracting Officer’s Representative, via email sonva.pearrell@,gsa.gov 
Chris Payton, Contracting Officer, chris,pavton@gsa. gov 

Copy: Vicky Niblett, Deputy Assistant Commissioner, via email vickv.niblett@gsa.gov 
OIG Public Affairs via email OIG PublicAffairs@gsaig.gov 
OIG FOIA Officer via email OIGFOIA-PrivacvAct@igsaig.gov 


RE: Beta.sam.gov Inappropriate Feedback Incident. 


Dear Ms. Pearrell and Mr. Payton: 

The purpose of this letter is to address the situation regarding inappropriate feedback 
submitted on the beta.sam.gov website that was attributed to current and past RCM 
employees. 

Though RCM initially believed the situation would not warrant further investigation, new 
information (see Item 1 below) has come to my attention and I have considered the 
potential impact of the comments submitted and the fact that these comments were done 
under false pretenses. Given the potential severity of the acts taken to disparage and 
undermine RCM, I have decided that it is necessary communicate several key points 
regarding this situation and continue the effort to identify the person making these 
comments: 

1. In a discussion with Salomeh Ghorbani and Nancy Goode on Tuesday, June 18, 
2019, Ms. Ghorbani expressed concern about her safety due to the content of 
these comments. GSA has had notice about these comments and RCM’s concerns 
as to who submitted them. Given this opaque situation, I am assuming GSA has 
already taken steps to investigate the matter and address any safety concerns its 
employees have in regard to the comments. This is especially important in that 
GSA has refused to provide RCM with the IP address associated with the 
submission. 

2. The fact that someone has impersonated RCM employees when submitting 
comments on a government website must implicate federal criminal 

3. These comments were disparaging and seemingly done to interfere with RCM’s 
contract with GSA and to destroy its reputation and that of its principal. 
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Background 

September 30,2016 - RCM Solutions was awarded Order Number GSQ1516IA0021 on 
its Professional Services Schedule Number GS-10F-0198U to provide Program 
Management, Communications, User Analysis, and Training to General Services 
Administration’s Integrated Award Environment (IAE). RCM has bee performing the 
services from September 30, 2016 through the present. 

May 23, 2019 - the undersigned received a call from Sonya Pearrell, the contract’s 
Contracting Officer’s Representative (COR) stating that there was feedback left on the 
beta.sam.gov website that was inappropriate and was attributed to Ron Martin (“Mr. 
Martin”). Specifically, the feedback stated, ‘Nancy Goode and Salomeh Ghorbani need 
to both go on vegan diets.” Ms. Goode and Ms. Ghorbani are federal employees 
supporting IAE. Ms. Pearrell, subsequently forwarded the email to RCM (Attachment 
A). 

Ms. Pearrell provided Mr. Martin with another email (Attachment B) containing two 
additional instances of an individual pretending to be 1) Mark Rivard, a past RCM 
employee, and 2) Nancy Goode. 

Mr. Martin went to GSA to discuss this situation with Ms. Ghorbani, in person. Mr. 
Martin apologized and assured her that he did not post the comments himself. Mr. 
Martin also left a voicemail for Ms. Goode, who teleworks from Florida. 

RCM formally requested, via email to the COR (Attachment C), that GSA provide RCM 
with the IP Address that the comments were submitted from. I received confirmation of 
the request via email (Attachment D) and the Deputy Assistant Commissioner; Vicky 
Niblett was copied on the acknowledgement. 

May 24, 2019 - Received update from COR that “request for additional information is 
still pending” (Attachment E). 

On or about May 28 - Mr. Martin received a call from Ms. Niblett wherein she stated 
the IP address was accessing the intemet/beta sam.gov from the Fredericksburg, Virginia 
area and that it was the same IP Address for all three of the feedback comments. She 
also stated that the IP Address was being used to access beta.sam.gov on a regular basis 
and during the early morning hours. 

May 29, 2019 - Received an update form the COR (Attachment F). Matt McGuire 
stating “Unfortunately, the way the Beta.SAM.gov is setup with logging and forwarding 
logs there does not appear to be a way to do it, or at least that I've found. All application 
and system logs are supposed to flow to Splunk, but I see limited IAE Application logs 
making it to Splunk and only the system logs that BAH has implemented. I will check 
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with Octo.” This email also stated that it was an IP address linked to a Verizon FIOS 
account out of Fredericksburg, VA. 

Mr. Martin and Ms. Niblett exchanged emails (Attachment G) on the status and Ms. 
Niblett confirmed “The IP in question started hitting Beta. SAM on 5/25 @1:10 AM until 
4:22 AM. On 5/26 the person at that IP started hitting Beta.SAM at 12:30 AM until 3:45 
AM. Then at 4:30 PM the traffic against Beta.SAM started again until 1:30 AM on 5/27. 
The user started hitting Beta.SAM again @ 6:30 PM on 5/27 until 6:45 PM” 

June 10, 2019 - Mr. Martin requested an update on access to the IP Address (Attachment 
H) 

June 12, 2019 - Mr. Martin requested and received a contact for the legal department 
from the COR (Attachment I). 

Mr. Martin sent an email to Mr. Goco (Attachment J) requesting assistance. 

June 13, 2019 - Mr. Martin received a response (Attachment K) from Ms. Niblett stating 
“Security will not allow us to release the IP information. In addition, that IP address has 
not logged a GSA System with user credentials.” Mr. Martin responded that he will 
request it through legal. 

On or about June 17, 2019 - Mr. Martin had a phone call with Mr. Matt McGuire. Mr. 
McGuire confirmed that GSA cannot identity a specific person with the IP address. He 
mentioned that they might be making changes to the website so as to require a user to log 
in to provide feedback on the system. Mr. Martin let Mr. McGuire know that RCM was 
considering steps to get access to the IP Address, but was unsure of the value of moving 
forward at this time. Mr. McGuire said he was “not sure how much more we can 
accomplish” and stated “it could be anyone, even a federal employee.” 

June 18, 2019 - Mr. Martin had a discussion with Ms. Goode and Ms. Ghorbani about 
the progress towards identifying the individual responsible for the comments. I advised 
them that while RCM was willing to move forward, we were not sure of the value of 
moving forward at this time. Both Ms. Goode and Ms. Ghorbani stated they were ok 
with not taking additional action at this time. 

Prior to the conversation ending, Ms. Ghorbani made a statement to the effect “I hope 
whoever did this does not track me down and shoot me.” and ‘Nancy, you do not have to 
worry you live in Florida” Clearly, this was new, important information for me to 
consider. 
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Next Steps 

Due to the severity of this situation, RCM will be pursing the following steps 

RCM is copying OIG with the expectation it will conduct an investigation. 

RCM will submit a Freedom of Information Act (FOIA) request for the IP address. 

RCM believes this situation was meant to interfere with its business and disparage its 
reputation and, therefore, RCM is evaluating its legal options. 

RCM prefers to work with GSA to resolve this situation and ensure the responsible 
person is appropriately held responsible. 

Please feel free to contact me if you have any further questions. 


Sincerely, 



Ronald C. Martin 
President & CEO 
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ATTACHMENT A 


Ron Martin 


From: 

Sent 

To: 

Subject 

Attachments: 


Sonya Pearrell - QD2AA <sonyapearreil@gsa.gov> 
Thursday, May 23,2019935 AM 
Ron Martin 

Fwtt SAM.gov Feedbad: Responses j prod 
F eedback_2019-05-22X LSX 


Sincerdy, 

Sonya Pearrell 

Program Analyst/CQR 
GSA/FAS/IAE 

Office of Systems Management 
Management & Program Support Division 
Office: 202-219-0214 
Ceti: 202-257-6494 


-Forwarded message- 

From: Satomeh Ghorban - QD2C <S3lomeh.ghorbani(S)gs3.EQtf > 
Date Thu, May 23,2019 at 93.4 AM 
Subject: Fwd: SAM .gov Feedback Responses | prod 
To: Sonya Pearrell (1AM) < sonya. De3rrelli3gs3.gev > 


I am SO done... 


Sakjmeh Ghorbani CISSP, PM P, FAC PPM III, 

I TIL v.3 Expert, SAFe Agilist 

IA£ Stakeholder Engagement and Outreach Division 

General Service Administration jGSA) 

Office 703.6053467 

Please consider (fee environment be fore printing this email 


--Forwarded message- 

From: < no-reply-samiS>gsa.g ov> 

Date: Wed, May 22,2019 at 9:55 PM 
Subject: SAM.gov Feedback Responses | prod 
To: < s3lomeh.ghorbani(3gs3.gov> 


Please find feedback report for - 2013-05-22 
number of records:4 


Page 5 of 25 










Case 8:19-cv-02952-CBD Document 1-1 Filed 10/09/19 Page 6 of 25 



ATTACHMENT A 


Excel Spreadsheet Attached to Email 



Sr ' 


mmmsMSK 

\ 

2106 

/ 



textarea 

ran.marti n@ rcnn-cofp.tofn 

2019-05-22 01:09:44-345 

2107 

/ 



textarea 

ron.martl r>@> rcm-corp.com 

2019-05-22 01:09:44345 

2103 

/ 

May we contact you if we have questions 
about your feedback? 

ronmartln(ffircm-CDrp.carr. 

Fadlo-text 

ran.martln^ rcnvcorp.com 

2019-05-22 0109:44.345 

2109 

/fai/S943S9639e7f4dfbafcd 

7b3e71943e93/vlew 


pdf on the webpage. Please change. 

Thanks. 

textarea 


2019-05-22 10:39:43.022 
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ATTACHMENT B 


Ron Martin 


From: 

Sent 

To: 


Sonya Pearreii - QD2AA < 50 nya.pe 3 rrell@ 55 a.qov> 
Thursday, May 23,2019 3:14 PM 
Ron Martin: 


Subject: Fwd: Here are two other instances of known fakers,... 

Attachments: Feedback_20t 9-05-0 B.XLSX; Feedback_2019-04-26JCLSX 


Sincerely, 

Sonya Pearreii 
Program Analyst/COR 
GSA/FAS/IAE 

Office of Systems Management 
Management & Program Support Division 
Office: 202-219-0214 
Cell: 202-257-6494 


-Forwarded message- 

From: Saiomeh Ghorbani - QD2C <satomeh.Ehorbani@gsa.gov> 

Date: Thu, May 23,2019 at 2:48 PM 

Subject: Here are two other instances of known fakers,... 

To: Sanya Pearreii (1AM) < sonya.pgarreli@gs3.gov > 


One pretend ing to me Mark Rivard 
One pretending to be Nancy 

Thanks 

Saiomeh Ghorbani OSSP, PMP, FAC PPM ill, 
iTlL v.3 Expert, SAFe Agifet 

IAE Stakeholder Engagement and Outreach Division 
General Service Administration (GSA) 

Office 703.605.3467 

Please consider the environment before printing this email 
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ATTACHMENT B 


Excel Spreadsheet #1 Attached to Email 
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ATTACHMENT B 


Excel Spreadsheet #2 Attached to Email 



I May. questions ■about: 




Hi Igmona list for domestic violence and 
disability deeieflts f was told thatE getting help. 
This sits 5s far Canadians to every time i turn 
around more money is Being asked by your 
government. I was under the impression at ’he 
money was to help people with oil medical and 
improving our quality of Hft 1 have give your 
government department over $ 10 . 000 00. now 
you want more. Please give me back aii my 


[ What tip yot? like crdlslite Bhootbeta.SAM.gQV? [money pi ease 


12013-04-2615:10:28371 


1354|/search?ln{toc=cftfa 
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ATTACHMENT C 


Ron Martin 

From: 

Ron Martin 

Sent: 

Thursday, May 23,2019 W7 PM 

Toe 

Sonya Pearreli - GD2AA 

Subject: 

Formal Request 

Sonya, 


( am officially requesting that GSA provide me with the IP addresses that pi nging the beta.sam .gov website at the time 
the feed back form was subm itted. RCM is committed to ident ifying and taking action against the individual that 
performed: this senseless act. 

Thanks, Ron 


nrnii 

fvwIMF 

Ronald C. Martin 

CEO and! President 

SOlUT IONS 

Office (301)352-4901 


Fax (mi ) 464-2853 


48 01 Tesla Dr., SuBe C 


Sarnie, MD 20715 


© 2017 by ROM SofaSans. 
AH Rights Reserved. 
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ATTACHMENT D 

Ron Martin 


From: 

Sent: 

To: 

Cc: 

Subject 


Hello Ron, 

I have copied Vicky for her response. 


Sonya Pearrefi - GD2AA <sonyapearretl@gsa.gov> 

Thursday, May 23, 20191:10 PM 

Ron Martin 

Vicky Niblett 

Re: Formal Request 


Sincerely, 

Sonya Peanreil 

Program Anafyst/COR 
GSA/FAS/IAE 

Office of Systems Management 
Management & Program Support Division 

Office: 202-219-0214 
Celt: 202-257-6494 


On Thu, May23,2019 at 1:07 PM Ron Martin <ron.maftimSrcm-CQrp.com> wrote: 


Sonya, 


I am officially requesting that GSA provide me with the IP addresses that pinging the beta,sam.eov website at the time 
the feedi back form was submitted. RCM is committed to identifying and taking action against the individual that 
performed this senseless act. 


Thanks, Ron 


M Ronald €. Martin 

f ^ CEO and President 

J f \ I ■ * ■ A A 

m* mmmm — . Office {301) 3*24981 

Fax 1301} 464-2853 

4801 TesSa Dr, SuiteC 
Borne, MB 20715 

©2017 by RCJS Soiutttms. 
^SRigis Reserved! 
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ATTACHMENT E 

Ron Martin 

from: 

Sent: 

Toe 
€c: 

Subject: 

Hello Ron, 

I have been in contact with Vicky this morning and your request for additions 
information is still pending. 

Sincerely, 

Sonya Pearreli 

Program Analyst/COR 
GSA/FAS/IAE 

Office of Systems Management 
Management & Program Support Division 

office: 202-219-0214 
Cell: 202-257-6494 


On Fri, May 24,2019 at 7:49 AM Ron Martin: < ron.martinPrcm-corp.com > wrote: 
Good mornir^j. 


Since there were two other instances, a nd it appea rs as though at least one of them is likely the same person that used 
my name, we should be able to see if there is common IP address that appears during both those times. Please let me 
know what I can do to get th is information. 


Thanis, Ron 


Sonya Pearreli - QD2AA <soflyapeameB@gsa.gov> 

Friday, May 24,2019 S:37 AM 

Ron Martin 

Vicky Niblett 

Re: Formal Request 
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Ron Martin 

ATTACHMENT F 

From: 

Sonya Pearreff - QD2M < 50 nyapearrey@gsa.gav: 

Sent 

Wednes day, May 29, 2019451 AM 

To: 

Ron Martin 

Cc: 

Chris Payton - 5QZA 

Subject: 

Fwd: Formal Re quest 


-Forwarded message- 

From: MatthewR. McGuire <matthew.mc guirejagsa.gov > 

Date Tue, May28,2019,11:01 AM 

Subject: Re: Forma! Request 

To: Vicky Niblett - GD2 <vicky.niblett@gsa.gov> 

Cc:Sonya Pearrell -QQ2AA <sonya.pearrell@gsa.gOLC > 


Unfortunately, the way the Beta.SAM .gov is setu p with logging and forward ing logs there does not appear to be a way to 
do it, oral least that iVe found. Ail application and system logs are supposed to flowtoSplunk, but I see limited IAE 
Application log?making it to Splunk and only the system legs that BAH has implemented. I will check with Goto. 

Matt 


Matthew R. McGuire 

Director, Office of the Assistant GO Acquisition IT 
Ceffe 3S2J821.E006 

e-mail: matt hew, rraegui rerSgsa .gov 


On Tue, May 28,2019 at 10i7 AM Vicky Niblett -QP2 <vickv.nibiettiS?gS3.eov> wrote: 
Isthereany way to link a user nameto that IP? 

Regards, 

Vicky 

Vicky Niblett 

Deputy Assistant Commissioner, Integrated Award Environment 

GSA Federal Acquisition Service 

1800 F Street, Washington, DC 

Email; vieky.niMett@gsa.gov 

Phone: 202-394-7572 


On May 28, 2019, at 10*3 AM, MatthewR, M cG ui re < mattbew.mcguireg) gsa.gov > wrote: 
Hi Sonya and Vicky, 

The IP Address is coming back as Verizon FiOS out of Fredericksburg, VA. 

Thank you, 

1 
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ATTACHMENT G 



Vicky Ntbiett - QD2 May 29,2019,1 AT PM 4s 

ioira - 

Use tP tn question started hitting Beta . SAM an 5/2S @130 AM until 4:22. AM. On 5/25 the person atthat tP started hitting Seta. SAM at 12:30 AM until 3:45 
AM. Than at 4:3Q PM the traffic against Beta.SAM started again until! 130 AM on 5/27. 

The ssser started hitting Beta.SAM again @ 6:30 PM on 5/27 until 6:45 PM 
Regard-s, 

Vicky 


Vicky Nibfett 

Deputy Assistant Commissioner, integrated Award Environment 
GSA Federal Acquisition Service 


* Keep it reliable. 

" 8e economical 

* Aim to reduce burden. 



Ronald Martin - QD-C cronatsUnarting 15 sa.Gov> 
to Vicky - 


May 29,2619, 2:00 PM 4s 


And all these were from the Fredericksburg area? Hone of the RCM employees five anywhere near Fredericksburg: Neither did any of our past employees, at 
feast not tn the lastyear. 


Have you found out if lean 1 get the IP address'? 


Ron 

* ' 
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ATTACHMENT H 


Ronald Martin - GD-C <ronald.martm,3gsa.<jcs> Junlct2Bl9, 13:4SAM (16 flays ago) 

to Vicky - 

Any progress on RCM getting Sie iP address? 

Thanks, Ron 
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ATTACHMENT I 


Ron Martin 


From; 

Sent: 

To: 

Subject 

Hello 

Please contact Nick Goco and tell him that I referred you. He should be able to put you 
in contact with the right person. 

Nick (Rolando) Goco 
Asst IG for Auditing 
roiaiido.cfPco®gsaiq;.gQv 

202-501-2322 

Sincerely, 

Sonya Pearrell 
Program Anaiyst/COR 
GSA/FAS/IAE 

Office of Systems Management 
Management & Program Support Division 

Office: 202-219-0214 
Cell: 202-257-6494 


On Wed, Jun 12,2019 at 7:49 AM Ron Martin < ron.martini5ircm-corp.com > wrote 
Do you have a contact in le^l that I can send my request for the IP address? 


Sonya Pearrell - QD2AA <sonyapearrell© gna.gov> 
Wednesday, June 12,2019 8:57 AM 
Ron Martin 
Re: GSA Legal 


Thanks, Ron 


iT^ 4^ ® & Ronald C, Martin 

m\fm CEO and President 

c At lili 

m*. -. . . «• -MM. Office (3D 1} 362-43B1 

Fax (301} 4S4-2853 

4801 Teds Or..., Suite C 
MO 20715 
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ATTACHMENT J 



Ron Martin 


Oral3rida,goa>@gsaig.gov; O Sanyafearrelt - QS52AA - 


Request for information related to sam.gov feedback 


o Fotfowup. Start by1Hursd«y, jurte 13, 2019, f>ue fey fhuf sday, iune 13,2019. 
You foiwarcterfthts message on 6/19/2019 9i4S AM.. 


a i 


toed 



feedback.2019-G5-22.XLSX . \ 


Good morning Mr. Goco, 

Sonya Pearreil (the COR) on our contract at GSA EAE, referred me to you. 1 hope that you can help me or refer me to the appropriate person. 

Below is an email that Sonya forwarded to me a few weeks ago. The attachment provides feedback that users of the new beta.sam.gov system can give to 
recommended improvements tothe system. As you can see within the attachment, someone made derogatory statements against Nancy Goode and Salomeh 
Shorbani (GSA employees) and put my name and email as the user making the comments. I can assure you that I did not make those comments. 

The system does not require the user to login to make comments, therefore the information isnot logged in the system. However, the system does store the IP 
address used, which can be used to identify the device/person that made the comment 

RCM feels it is imperative to identify this person and take the necessary actions to ensure it does not happen again. Therefore, i am requesting that GSA provides 
us with the IP Address that used to make the comments, and the date and time for each instance that iP Address access beta.sam.gov. 

Please iet me know how I can gain access to this information. 

Sincerely, 

Ron Martin 



SO LOTIONS 


wtsssse*. ewwmtez-. 


Ronald C. Martin 

€150 and President 

Office (301) 352-4981 
Fax (301)484-2853 

4881 Tesia Dr., Suite C 
Cowrie, MB 20715 


1B20U by ROW Solutions. 
All Rights Reserved 


C neck out oxr new we&sHef wwwjcm-corpxom 
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ATTACHMENT K 



Vicky Nibtfitt - QD2 Jan 13,3319, 4>'11 PM (7 days 33 s} 

Ron, Security wB not alow as <0 release ills IP information. Inaddtion, Shat IP address has notioggeti in to a GSA System with user credentials. 


☆ 



Ronald Martin - GD-C<roRalci.mart!rigagsa,gov> 
to Vicky, Sonya, Matthew * 

Ok. 1 wiB requested it formally though iagai. 


i feel it is important for me ta take action on it 


Ron 


Jurfi3,2019,4:44 PM (7 days 380) yjf ; 
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ATTACHMENT L 


beta.sam.gov Feedback Postings 



Ronald Martin - t}D-C«nraafemartin@gsa.gov> 
to Sonya. Vicky, MEtthew, Saioraeh, Nancy, Ron » 


Good mommg, 


Here ils the current status of what we know about the inappropriate feedback fefl on beta. sam. gov: 


X W B 

Tue, Jen 5S, 11:42 AM {2 days a<|o} -fo j 


1. Matt has determined that the IP address that left the 3 messages are the same. 

2. The IP address in question is accessing the internet in the Frederietehurg area and accesses hata.sam. nov on a regular basis and often during the 
early morning hours 

3. RCM has no current or past employees that Sve in that area. 

4. RCM has requested the iP address so we cotdd fevestrgate further, but GSA is unJikeiy to provide without a court order due to privacy issues. 

5. Even if RCM had the IP address, RCM would need a court order to force fee iSP to provide the account holder information. 

6. it is mv understanding lhat ISP's only keep the information for a limited time, therefore, the data may not be available once (he court orders are received 
and the information is provided. 

After discussions with Vtcky, Matt, Saksneh and Nancy,J have determined there is Rile value or need in pursuing the required court orders to “potentially"' identify 
the person. 

II remain frustrated that RCM, and my name spedfscaity, was used in such an inappropriate way and apologize for fee harm ft created to Soiameh and Nancy. 

Please let me know if you have any questions. 

4 ® 
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